Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management?

Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management? (Choose two.)
A. By default, all requests are denied
B. An explicit allow overrides an explicit deny
C. An explicit allow overrides default deny.
D. An explicit deny does not override an explicit allow
E. By default, all request are allowed